PayDsecure is designed to the standards banks, auditors and regulators expect. Here is what that means for your money and your data.
SOC 2
Our controls follow the SOC 2 Trust Services Criteria: security, availability, processing integrity, confidentiality and privacy. Access reviews, change approvals, logging and incident response are in place from day one, ahead of our independent SOC 2 Type II audit.
PCI DSS
We never see or store full card numbers. Cards are captured and processed by PCI DSS Level 1 certified payment partners, so card data stays inside their certified environment and our systems handle only secure tokens.
Personal data (PII)
We collect only what the law and the payment need. Personal data is encrypted in transit and at rest, access is limited to staff whose role requires it, and every view is logged. We follow the Nigeria Data Protection Act, UK and EU GDPR and US state privacy laws, and we never sell your data.
Human in the loop
Our systems flag unusual payments and risk, but people decide. A trained PayDsecure officer reviews every large payment, every credit and financing recommendation, and every account hold. Automated tools never approve a loan or close an account on their own, and you can always ask for a human review.
Anti-money laundering
Identity and business verification, sanctions and politically exposed person screening, transaction monitoring and suspicious activity reporting, run under a written AML and counter-terrorist financing programme.
Resilience
Encrypted backups in separate locations, tested recovery plans and a documented incident response process, so a fault in one place does not stop your payments or lose your records.